Information Security Officer - Director's Office - CF051

Join our team as an Information Security Officer and play a vital role in safeguarding the critical information and technology systems that support public safety, forensic science, and the justice system. The Department of Forensic Science (DFS) is seeking an Information Security Officer (ISO) to lead the agency’s Information Security Program and ensure compliance with Virginia Information Technologies Agency (VITA) security standards. Reporting directly to the Agency Director, the ISO collaborates with agency leadership, IT staff, and external partners to protect systems essential to agency operations.

The ISO is responsible for developing and maintaining DFS information security policies and standards; managing system classifications, risk assessments, security exceptions, and required documentation; and administering the IT Security Audit Program. The ISO serves as the primary liaison to the Commonwealth’s Chief Information Security Officer (CISO), VITA officials, auditors, and external partners, and maintains the required annual ISO certification.

Key responsibilities include overseeing IT infrastructure security, vulnerability management, incident response, and continuity and disaster recovery planning. The ISO designs and implements internal controls and procedures aligned with evolving technologies, statutes, regulations, and VITA policies. Additional responsibilities include managing the Security Awareness and Training Program for staff, contractors, and IT service providers; advising leadership on security risks and compliance obligations; supporting the Systems Development Lifecycle (SDLC) by ensuring IT security is integrated into system planning and development; and serving as the agency’s eVA (the Commonwealth’s electronic procurement system) Security Officer.

Telework may be available up to two days per week after completion of agency training and orientation.

The ISO uses DFS and VITA resources to actively monitor the agency’s security posture. Responsibilities also include reviewing and reporting findings from VITA vulnerability scans and expanding monitoring efforts using new VITA-provided tools for server, network, and firewall logging. As VITA deploys enterprise logging and monitoring platforms such as Splunk statewide, the ISO will incorporate these tools into DFS security monitoring to provide real-time awareness of potential threats to sensitive systems.

Do you have experience in Writing skills?, * Experience developing, implementing, and monitoring information security policies, standards, and procedures

• Experience evaluating and monitoring IT environments for compliance with information security architecture, policies, and standards
• Experience managing or supporting a comprehensive information security program
• Experience in application security, contingency planning, IT risk management and governance, incident management, information security reviews, and security awareness training
• Experience conducting risk assessments and audits, implementing security controls and compliance, and executing security incident response
• Strong project management skills with the ability to prioritize tasks, meet deadlines, and manage multiple concurrent activities
• Ability to effectively communicate complex technical information verbally and in writing to diverse audiences and multiple levels of management
• Ability to interpret technology and security standards and ensure agency compliance
• Ability to implement and validate appropriate controls for IT applications and information resources
• Ability to work in a fast-paced environment and quickly acquire new knowledge or skills to meet organizational needs
• Must obtain and maintain the Commonwealth of Virginia (COV) ISO Certification within the first year of employment, in accordance with VITA requirements, or hold an equivalent professional information security certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA)

Additional Considerations

• Current COV Information Security Officer (ISO) Certification
• Possession of a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA) or equivalent
• Prior ISO experience in a government environment, ideally within the Commonwealth of Virginia
• Knowledge of VITA and COV IT security policies, standards, and requirements
• Experience using log aggregation or SIEM tools such as Splunk for security monitoring and analysis
• Experience supporting IT security requirements during system development, upgrades, and technology procurement processes, DFS does not provide sponsorship or STEM OPT extensions. Applicants must be legally authorized to work in the United States at the time of hire and must maintain such authorization for the duration of their employment without the need for employer sponsorship or a STEM extension.

Background Investigation: Selected candidate(s) must successfully pass a background investigation to include a fingerprint-based criminal history check. Selected candidate(s) must provide a DNA sample via a buccal swab (saliva sample) and successfully pass a drug test. Reference checks will be conducted to include contact with current and previous supervisors.

The Virginia Department of Forensic Science has recently moved to a new, state-of-the-art facility in Hanover County.